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IN THE CLAIMS 
Please amend the claims as follows: 

1. (Original) A database access control method for performing access control on a 
database in response to a request from a user apparatus through cooperation between a 
database access control apparatus and a proxy process server apparatus, wherein: 

the database access control apparatus sends an address of a usable proxy process 
server apparatus to the user apparatus in response to the request from the user apparatus; 

the user apparatus connects to the proxy process server apparatus of the address to 
make a database access request; 

the proxy process server apparatus makes a database process request to the database 
access control apparatus according to the database access request from the user apparatus; 

the database access control apparatus performs a process on the database in response 
to the database process request from the proxy process server apparatus, and sends a process 
result to the proxy process sever apparatus; and 

the proxy process server apparatus performs an additional process on the process 
result sent from the database access control apparatus, and sends an additional process result 
to the user apparatus. 

2. (Original) The database access control method as claimed in claim 1, wherein, 
the database access control apparatus generates an access key based on a user ID of 

the user apparatus, stores the access key in a storing part of the database access control 
apparatus and sends the access key to the user apparatus; 

the user apparatus sends the access key to the proxy process server apparatus when 
making the database access request to the proxy process server apparatus; 
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the proxy process server apparatus sends the access key to the database access control 
apparatus when making the database process request to the database access control apparatus; 
and 

the database access control apparatus determines whether an access key the same as 
the access key received from the proxy process server apparatus exists in the storing part, and 
executes an access to data in the database within a limit permitted for the user ID 
corresponding to the access key only if the access key exists in the storing part. 

3. (Original) The database access control method as claimed in claim 2, wherein, - 
the database access control apparatus determines whether the user apparatus is in a 

state of being connected to the proxy process server apparatus in addition to performing 
determination of the access key, and performs the access to the data in the database only if 
the user apparatus is in the state of being connected to the proxy process server apparatus. 

4. (Original) A database access control apparatus for performing access control on a 
database in response to a request from a user apparatus through cooperation with a proxy 
process server apparatus, comprising: 

means for instructing the user apparatus to connect to the proxy process server 
apparatus by sending an address of a usable proxy process server apparatus to the user 
apparatus in response to a request from the user apparatus; and 

means for performing a process on the database in response to a database process 
request from the proxy process server apparatus, and sending a process result to the proxy 
process sever apparatus. 
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5. (Original) The database access control apparatus as claimed in claim 4, further 
comprising: 

means for generating an access key based on a user ID of the user apparatus, storing 
the access key in a storing part of the database access control apparatus and sending the 
access key to the user apparatus when sending the address of the proxy process sever 
apparatus to the user apparatus; 

means for receiving the access key and the database process request from the proxy 
process sever apparatus, and determining whether an access key the same as the access key 
received from the proxy process server apparatus exists in the storing part; and 

means for executing an access to data in the database within a limit permitted for the 
user ID corresponding to the access key only if the access key exists in the storing part. 

6. (Original) The database access control apparatus as claimed in claim 5, wherein, 
the database access control apparatus determines whether the user apparatus is in a 

state of being connected to the proxy process server apparatus in addition to performing 
determination of the access key, and performs the access to the data in the database only if 
the user apparatus is in the state of being connected to the proxy process server apparatus. 

7. (Currently Amended) A proxy process server apparatus for accessing a database 
via a database access control apparatus in response to a request from a user apparatus, 
comprising: 

means for receiving an access key and a database access request from the user 
apparatus , the access key being generated by the database access control apparatus based on a 
user ID of the user apparatus, being stored in the database access control apparatus and 
having been sent to the user apparatus ; 
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means for sending a database process request and the access key to the database 
access control apparatus; and 

means for receiving a process result of the database according to the database process 
request from the database access control apparatus when an access key same as the access 
key sent from the proxy process server apparatus exists in the database access control 
a pparatus , performing an additional process on the process result, and sending an additional 
process result to the user apparatus. 

8. (Currently Amended) A computer readable storage medium encoded with a 
program for causing a computer to execute a database access control process for performing 
access control on a database in response to a request from a user apparatus through 
cooperation with a proxy process server apparatus, the program causing the computer to 
execute: 

a step for instructing the user apparatus to connect to the proxy process server 
apparatus by sending an address of a usable proxy process server apparatus to the user 
apparatus in response to a request from the user apparatus; and 

a step for performing a process on the database in response to a database process 
request from the proxy process server apparatus, and sending a process result to the proxy 
process sever apparatus. 

9. (Currently Amended) The computer readable storage medium program as claimed 
in claim 8, the program causing the computer to execute: 

a step for generating an access key based on a user ID of the user apparatus, storing 
the access key in a storing part of the database access control apparatus and sending the 
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access key to the user apparatus when sending the address of the proxy process sever 
apparatus to the user apparatus; 

a step for receiving the access key and the database process request from the proxy 
process sever apparatus, and determining whether an access key the same as the access key 
received from the proxy process server apparatus exists in the storing part; and 

a step for executing an access to data in the database within a limit permitted for the 
user ID corresponding to the access key only if the access key exists in the storing part. 

10. (Currently Amended) The computer readable storage medium program as 
claimed in claim 9, the program causing the computer to execute: 

a step for determining whether the user apparatus is in a state of being connected to 
the proxy process server apparatus in addition to performing determination of the access key, 
and performing the access to the data in the database only if the user apparatus is in the state 
of being connected to the proxy process server apparatus. 

11-12. (Canceled) 

13. (Currently Amended) A computer readable recording medium r e cording th e 
program as claim e d in claim 12 embedded with a computer program for causing a computer 
to perform a proxy process for accessing a database via a database access control apparatus in 
response to a request from a user apparatus, the program causing the computer to execute: 

a step for receiving an access key and a database access request from the user 
a pparatus, the access key being generated by the database access control apparatus based on a 
user ID of the user apparatus, being stored in the database access control apparatus and 
having been sent to the user apparatus: 
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a step for sending a database process request and the access key to the database access 
control apparatus; and 

a step for receiving a process result of the database according to the database process 
request from the database access control apparatus when an access key same as the access 
key sent from the proxy process server apparatus exists in the database access control 
apparatus, performing an additional process on the process result, and sending an additional 
process result to the user apparatus . 

14. (New) The database access control method as claimed in claim 2, wherein the 
database access control apparatus overwrites or erases the access key stored in the storing 
part after performing the process on the database in response to the database process request 
from the proxy server apparatus. 

15. (New) The database access control method as claimed in claim 2, wherein the 
database access control apparatus overwrites or erases the access key stored in the storing 
part when the database access control apparatus is accessed by the user apparatus next. 

16. (New) The database access control method as claimed in claim 2, wherein the 
database access control apparatus overwrites or erases the access key stored in the storing 
part when the database access control apparatus receives a next request from the user 
apparatus. 

17. (New) The database access control apparatus as claimed in claim 5, further 
comprising: 
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means for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus after the database access control apparatus performs the 
process on the database in response to the database process request from the proxy server 
apparatus. 

1 8. (New) The database access control apparatus as claimed in claim 5, further 
comprising: 

means for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus when the database access control apparatus is accessed by 
the user apparatus next. 

19. (New) The database access control method as claimed in claim 5, further 
comprising: 

means for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus when the database access control apparatus receives a next 
request from the user apparatus. 

20. (New) The computer readable storage medium as claimed in claim 8, the program 
causing the computer to further execute: 

a step for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus after the database access control apparatus performs the 
process on the database in response to the database process request from the proxy server 
apparatus. 
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21 . (New) The computer readable storage medium as claimed in claim 8, the program 
causing the computer to further execute: 

a step for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus when the database access control apparatus is accessed by 
the user apparatus next. 

22. (New) The computer readable storage medium as claimed in claim 8, the program 
causing the computer to further execute: 

a step for overwriting or erasing the access key stored in the storing part of the 
database access control apparatus when the database access control apparatus receives a next 
request from the user apparatus. 
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